Skip to content

Introducing the FIM Team Mentor Program

Today I’m please to announce a new initiative by the FIM Team: the FIM Team Mentor Program.

Learning FIM is hard, and working out how best to apply it to the requirements and constraints of your environment is even harder. But maybe you don’t want, or don’t have the budget, to get consultants to come in and do it all for you. Perhaps you’ve done some training but you’re still getting stuck – really what you need is someone to talk ideas over with, to get some pointers from, to learn from their real-world experiences of what works and what doesn’t.

By signing up to this program you will be assigned your own personal mentor from the experienced consultants in the FIM Team who will be able to assist you via email or phone/web conference.

For more information and for contact details please see http://thefimteam.com/fim-team-mentor-program/.

RCDC Variables, and using them to scope a ListView or IdentityPicker

I don’t know how many times I’ve used the RCDC documentation, but somehow never noticed the bit on Environment Variables. Today however I was looking for a way to restrict the scope of a UocListView or UocIdentityPicker based on properties of the user being edited – and it turns out that you can reference any properties of the object using %Attribute_AttributeName%, then use it in a filter!

Continue reading ›

Authorization after an Action

Something that has come up from time to time on the FIM forum is the need to trigger an AuthZ workflow based on some change made by an Action workflow (or by the Sync Service). This is not possible in the FIM Service today and I don’t see any evidence that it will be possible in the future either – I guess it must mess up the workflow processing on some fundamental level.

The gereral consensus on the forum has been that you need to start a new request from outside the Portal – perhaps by using a powershell script. This new request can then follow the full AuthN -> AuthZ -> Action progression. But how to trigger it?

I have now worked through this idea and it’s working, though did need quite a few policy objects in the Portal as well as the script.

Continue reading ›

Installing Reporting for FIM R2 RC

I have just installed the reporting for FIM R2 RC and generated my first reports. Though when I say “just” read that as “spent two days on it and reinstalled twice”. However it is now working (yay! Was it worth it? Not sure yet!) and here’s my write-up.

You should also refer to the following documents from the FIM R2 media:

  • Test Lab Guide: Demonstrating Forefront Identity Manager 2010 R2 Beta Reporting
  • Test Lab Guide: Installing Forefront Identity Manager 2010 R2 Release Candidate

Continue reading ›

Powershell script to generate test users in AD

I needed to set up a test AD with realistic looking test users. This script by Alex Tcherniakhovski was the type of thing I wanted as it starts with lists of OUs, first names and last names and then creates accounts across all OUs listed, and using a random selection of names.

However Alex’s script uses Excel which I don’t have installed in my lab and don’t really want. So I’ve taken his source lists and his concept and written a little powershell script to do much the same thing.

You can download it from here.

Annual blag post

I’ve received word that I have been awarded the MVP for 2012. I never take this for granted and it always makes me very happy to receive this acknowledgement, so thank you Microsoft and the FIM PG!

Outbound Sync Rule Scope

Just getting started with FIM R2 RC here at the moment – and the first thing I’m excited about is outbound Sync Rule scopes!

Continue reading ›

Don’t use the FIM configuration migration scripts between versions

I’ve just been installing FIM R2 RC into my lab. Unfortunately I couldn’t get the portal to upgrade from R2 beta to R2 RC (and to be fair the doco doesn’t say you should be able to) so had the bright idea of using the migration scripts to do a config comparison between my beta and RC environments, and hopefully update the RC lab with my beta lab modifications.

I guess this shows I haven’t used the migration scripts all that much, because I didn’t realise they would start deleting all the new schema attributes to do with reporting!

So now I know: don’t use the FIM migration scripts between versions.

Microsoft.IdentityManagement.SolutionPackUtility.exe crashing FIM

Had a weird problem on a dev box. Whenever I launched Synchronization Service Manager, and sometimes even just when opening the properties of a MA, everything would stop while the server seemingly tried to install something in the background. Running taskmgr.exe revealed Microsoft.IdentityManagement.SolutionPackUtility.exe and TrustedInstaller.exe were running.

Continue reading ›

FIM Portal demo – using FIM to manage BPOS/Office 365

Regular readers of this blog will know that, a few months ago, I made a big move from Europe back to my native Australia. All our stuff finally turned up a couple of weeks ago, and while looking for something else on a harddrive I came across this recording I made which demonstrates part of the FIM-BPOS solution I worked on in Switzerland.

I made this recording as an emergency backup for a session I gave at TEC, in case of laptop implosion or other unforseen disaster. So it’s not particularly professional and in fact a bit rubbish in places (there must have been some “zoom to mouse” setting so I’m afraid there’s a couple of nice long shots of the corner of the screen), however I’ve decided to share it as an example of some of the useful things you can do with the FIM Portal.
Continue reading ›